PRIVACY POLICY

Information notice pursuant to Art. 13 of EU Regulation No. 2016/679 – Website

TECNOGEN S.p.A. (Tax Code and VAT No. 01126350337), with registered office at Strada per Ponteriglio, 25 – 29010 Pontenure (Piacenza) – Italy, in the person of its legal representative pro tempore (hereinafter also “TECNOGEN” and/or “Data Controller”), in its capacity as Data Controller pursuant to Articles 4 No. 7) and 24 of EU Regulation No. 2016/679 (GDPR),

HEREBY INFORMS YOU THAT

pursuant to Art. 13 of the GDPR, your personal data described in Article 1 below will be processed for the processing purposes described in Article 2 below.

1. CATEGORIES OF PERSONAL DATA PROCESSED

1.1. TECNOGEN SPA collects and processes, in order to pursue the processing purposes described in Art. 2, your personal data pursuant to Art. 4 No. 1) of the GDPR, so-called identification data (e.g. e-mail address; telephone number; first name; surname), through one or more interaction options available on this Tecnogen spa website www.tecnogen.com (the “Site”).

2. PURPOSES OF PROCESSING AND RELATED LEGAL BASIS

2.1. Your personal data are processed by TECNOGEN for the following processing purposes:

  • handling your contact request for job applications submitted through the “Work with us” form;
  • handling your request to download catalogues and any subsequent specific assistance or support from Tecnogen staff.

In accordance with Art. 13 paragraph 2) letter e) of the GDPR, TECNOGEN specifies that any failure to provide (even partially) your personal data may make it impossible for TECNOGEN to fully carry out the processing purposes in question.

In this regard, TECNOGEN specifies that the legal basis for the processing purposes referred to in Art. 2.1. letters a) and b) is found in the following legal provision: Art. 6 paragraph 1) letter b) of the GDPR.

3. RETENTION PERIOD

3.1. In accordance with Art. 13 paragraph 2) letter a) of the GDPR, TECNOGEN informs you of the following retention period/criterion, at the end of which your personal data will be subject to erasure, destruction or anonymisation:

  • for the processing purpose referred to in Art. 2.1. letter a): 1 year, starting from the full and complete handling of your CV submission request and the review by Tecnogen Spa of the related information, a term which may be extended in order to comply with legal obligations (including subsequent ones) or to assert or defend a right, including in court;
  • for the processing purpose referred to in Art. 2.1. letter b): 10 years, starting from the full handling of your catalogue download request, a term which may be extended in order to comply with legal obligations (including subsequent ones) or to assert or defend a right, including in court.

4. RECIPIENTS

4.1. In accordance with Art. 13 paragraph 1) letter e) of the GDPR, TECNOGEN specifies that your personal data may be communicated, where appropriate and necessary, to one or more recipients pursuant to Art. 4 No. 9) of the GDPR, identified in general terms by category, for the processing purposes referred to in Art. 2.1. letters a) and b):

  • persons authorised by TECNOGEN to process data pursuant to Articles 4 No. 10), 29 and 32 paragraph 4) of the GDPR;
  • companies controlled by or otherwise affiliated, even indirectly, with TECNOGEN;
  • consultants or companies of various kinds providing services and/or activities (including professional ones) connected, even indirectly, with the fulfilment of the purposes in question (e.g. IT companies).

TECNOGEN finally specifies that your personal data will not be subject to any dissemination.

5. TRANSFER

5.1. TECNOGEN specifies that your personal data are/may be stored in automated, partially automated or non-automated archives belonging or otherwise attributable, even indirectly, to TECNOGEN, and located within the European Economic Area (EEA).

6. RIGHTS OF THE DATA SUBJECT

6.1. In relation to your personal data, TECNOGEN informs you of the right to exercise the following rights, possibly subject to the limitations provided for by Articles 2-undecies and 2-duodecies of the Italian Privacy Code:

  • right of access pursuant to Art. 15 of the GDPR: the right to obtain confirmation as to whether or not personal data are being processed, as well as the information referred to in Art. 15 of the GDPR (e.g. purposes of processing, retention period);
  • right to rectification pursuant to Art. 16 of the GDPR: the right to correct, update or supplement personal data;
  • right to erasure pursuant to Art. 17 of the GDPR: the right to obtain the erasure, destruction or anonymisation of personal data, where the conditions listed in that article are met;
  • right to restriction of processing pursuant to Art. 18 of the GDPR: a right of a markedly precautionary nature, aimed at obtaining the restriction of processing where the circumstances governed by Art. 18 apply;
  • right to data portability pursuant to Art. 20 of the GDPR: the right to receive the personal data provided to the Data Controller in a structured, commonly used and machine-readable format (and, where requested, to have them transmitted directly to another Data Controller), where the specific conditions set out in that article apply (e.g. legal basis of consent and/or performance of a contract; personal data provided by the data subject);
  • right to object pursuant to Art. 21 of the GDPR: the right to obtain the permanent cessation of a specific processing of personal data;
  • right to lodge a complaint with the Supervisory Authority (i.e. the Italian Data Protection Authority, “Garante Privacy”) pursuant to Art. 77 of the GDPR: the right to lodge a complaint where you believe that the processing in question infringes national and EU legislation on the protection of personal data.

6.2. In addition to the rights described in Art. 6.1. above, the Data Controller specifies that, in relation to your personal data, you may, where possible and relevant, exercise, on the one hand, the (sub-)right provided for by Art. 19 of the GDPR (“The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it”), to be considered connected and linked to the exercise of one or more of the rights governed by Articles 16, 17 and 18 of the GDPR; on the other hand, the Data Controller specifies that, in relation to your personal data, you may, where possible and relevant, exercise the right provided for by Art. 22 paragraph 1) of the GDPR (“The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”), without prejudice to the exceptions provided for in paragraph 2) thereof.

6.3. In accordance with Art. 12 paragraph 1) of the GDPR, TECNOGEN undertakes to provide the communications referred to in Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible and easily accessible form, using clear and plain language: such information will be provided in writing or by other means, including electronic means, or, at the request of the data subject, orally, provided that the identity of the data subject is proven by other means.

6.4. In accordance with Art. 12 paragraph 3) of the GDPR, TECNOGEN informs you that it undertakes to provide information on the action taken on a request pursuant to Articles 15 to 22 of the GDPR without undue delay and, in any event, within one month of receipt of the request; this period may be extended by 2 months where necessary, taking into account the complexity and number of requests (in such case, TECNOGEN undertakes to inform you of such extension and the reasons for the delay within one month of receipt of the request).

6.5. The rights described above (with the exception of the right under Art. 77 of the GDPR) may be exercised using the contact details set out in Art. 7 below.

7. CONTACT DETAILS

7.1. TECNOGEN may be contacted at the following address: privacy@tecnogen.com

Pontenure (PC), 08.06.2026 (date of last update)

TECNOGEN spa
(in the person of its legal representative pro tempore)